$ rpki-client -vvf rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft File: djSthmVu_mxF5O-Zj5S2l6w5vvE.mft (raw, json) Hash identifier: /5a/0+WtvRn+qJjsQLKouV5whLyS4WJw6AhBcaKtKA4= Subject key identifier: CB:D5:2F:17:EF:51:F8:99:40:EA:0B:0E:85:D9:3E:49:6D:AB:06:F6 Authority key identifier: 76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 Certificate issuer: /CN=A91B23D9/serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Certificate serial: 60 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft Manifest number: 5E Signing time: Tue 01 Jul 2025 07:51:20 +0000 Manifest this update: Tue 01 Jul 2025 07:51:20 +0000 Manifest next update: Tue 08 Jul 2025 07:51:20 +0000 Files and hashes: 1: djSthmVu_mxF5O-Zj5S2l6w5vvE.crl (hash: GjRoNSqY3lsd1cJ9Nwc+SS11AIhyHJXJ5Vvgq3MxGLg=) 2: 5FF7DA8AC9DD11EF9A19CE57C4F9AE02.roa (hash: +gnNwknF2udgbeSCQKAvlJ+Kl8XnvhGtCbKQkcxQ+I8=) 3: 7BC585BEC9DD11EF98B1E263C4F9AE02.roa (hash: ZZi0Gn/OMvF3e89O2m6QByhZ3253TVeiYiuccUZGQj0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 08 Jul 2025 07:51:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 96 (0x60) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91B23D9, serialNumber=7634AD86656EFE6C45E4EF998F94B697AC39BEF1 Validity Not Before: Jul 1 07:51:20 2025 GMT Not After : Jul 8 07:51:20 2025 GMT Subject: CN=68639378-969b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:4b:8b:d6:f8:d9:e3:da:cb:49:29:93:18:f8: b2:1e:a5:60:c9:58:b9:1a:6f:85:cf:6d:3d:f2:be: a3:5a:07:a4:ea:6e:5d:70:e8:44:73:ba:a1:a4:49: 3f:35:32:10:76:23:f1:2c:b1:c2:f4:97:f9:f0:61: b2:03:60:dc:3e:bb:64:bb:73:b1:15:54:1b:9a:96: 70:55:85:21:53:b1:c3:b7:f0:fb:3b:e5:f3:fb:0b: 28:76:97:6e:d4:19:77:17:7b:1a:79:58:89:ee:aa: 27:eb:76:eb:f1:dc:54:0a:21:ee:0d:4c:ac:69:c1: 1e:1c:13:28:91:c5:ed:b9:02:1e:2e:c3:fe:e2:61: 1c:ea:5f:78:e0:ec:90:58:ed:7d:f9:37:f3:12:37: 13:30:cd:cf:22:ee:77:26:a6:00:d6:48:5e:5f:fe: 9a:f6:d5:e7:3f:67:c0:c1:85:24:3a:6c:02:03:36: 6f:bc:68:f3:2d:7e:78:15:fd:6c:11:dc:03:4a:9c: 7c:f3:7f:a3:60:71:57:c1:ed:d1:44:9c:24:c6:3c: 90:66:b2:96:e2:fe:7b:38:21:19:81:72:15:cc:66: 6c:3d:23:d6:1b:8f:05:84:61:c8:d2:70:f9:cc:94: 02:82:15:9f:70:28:03:66:ad:42:c0:c7:6f:db:0b: e2:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D5:2F:17:EF:51:F8:99:40:EA:0B:0E:85:D9:3E:49:6D:AB:06:F6 X509v3 Authority Key Identifier: keyid:76:34:AD:86:65:6E:FE:6C:45:E4:EF:99:8F:94:B6:97:AC:39:BE:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/djSthmVu_mxF5O-Zj5S2l6w5vvE.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B23D9/83686ACCC9D111EF975BDC4BC4F9AE02/djSthmVu_mxF5O-Zj5S2l6w5vvE.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 51:2e:b2:d9:0e:c7:b5:74:a4:80:c4:6d:66:25:eb:c8:3c:69: 7c:23:51:60:a3:86:23:d9:e2:b0:2b:18:57:66:49:61:7c:90: eb:a0:b6:e6:76:ca:3b:89:7f:0d:8e:4b:87:85:9a:d3:ff:ea: b4:97:df:d8:a9:87:ec:28:77:9e:f3:57:e7:00:fe:85:17:c5: 97:e5:e3:46:77:66:93:83:16:d7:37:65:a0:aa:55:59:05:34: 0c:ce:7b:59:e8:12:4f:fa:7f:1e:a9:67:df:71:9c:af:15:63: 78:25:1c:7e:cc:7c:a0:e9:4f:27:ef:a0:8b:46:56:f0:e7:3f: 58:41:8a:f6:28:4b:b4:56:22:62:4e:53:92:14:84:4d:b7:1d: ec:db:95:89:7f:9a:6d:dc:a2:28:11:0c:ad:0a:27:16:a7:59: c0:db:4e:dd:36:69:56:f4:98:3c:af:8d:61:1e:db:bf:89:cf: 5f:d6:ca:02:d1:6f:fa:be:54:ca:7d:6f:21:bf:2b:18:27:ed: 85:60:56:46:96:e2:a7:18:79:39:fe:d3:9a:4c:52:e2:17:78: 5c:71:bb:2b:39:6a:00:36:76:ea:62:b4:1d:1b:64:23:b2:0c: c2:84:c8:be:d2:bc:ea:72:c1:8d:83:2e:80:1c:6e:f9:37:9b: bb:16:3e:83 -----BEGIN CERTIFICATE----- MIIFgzCCBGugAwIBAgIBYDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC MjNEOTExMC8GA1UEBRMoNzYzNEFEODY2NTZFRkU2QzQ1RTRFRjk5OEY5NEI2OTdB QzM5QkVGMTAeFw0yNTA3MDEwNzUxMjBaFw0yNTA3MDgwNzUxMjBaMBgxFjAUBgNV BAMTDTY4NjM5Mzc4LTk2OWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCsS4vW+Nnj2stJKZMY+LIepWDJWLkab4XPbT3yvqNaB6Tqbl1w6ERzuqGkST81 MhB2I/EsscL0l/nwYbIDYNw+u2S7c7EVVBualnBVhSFTscO38Ps75fP7Cyh2l27U GXcXexp5WInuqifrduvx3FQKIe4NTKxpwR4cEyiRxe25Ah4uw/7iYRzqX3jg7JBY 7X35N/MSNxMwzc8i7ncmpgDWSF5f/pr21ec/Z8DBhSQ6bAIDNm+8aPMtfngV/WwR 3ANKnHzzf6NgcVfB7dFEnCTGPJBmspbi/ns4IRmBchXMZmw9I9YbjwWEYcjScPnM lAKCFZ9wKANmrULAx2/bC+KXAgMBAAGjggKoMIICpDAdBgNVHQ4EFgQUy9UvF+9R +JlA6gsOhdk+SW2rBvYwHwYDVR0jBBgwFoAUdjSthmVu/mxF5O+Zj5S2l6w5vvEw DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyM0Q5LzgzNjg2QUNDQzlE MTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214RjVPLVpqNVMybDZ3NXZ2 RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG RDFGRjIvZGpTdGhtVnVfbXhGNU8tWmo1UzJsNnc1dnZFLmNlcjBKBgNVHSABAf8E QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj Lm5ldC9SUEtJL0NQUy5wZGYwgcUGCCsGAQUFBwELBIG4MIG1MH4GCCsGAQUFBzAL hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy M0Q5LzgzNjg2QUNDQzlEMTExRUY5NzVCREM0QkM0RjlBRTAyL2RqU3RobVZ1X214 RjVPLVpqNVMybDZ3NXZ2RS5tZnQwMwYIKwYBBQUHMA2GJ2h0dHBzOi8vcnJkcC5h cG5pYy5uZXQvbm90aWZpY2F0aW9uLnhtbDAVBggrBgEFBQcBCAEB/wQGMASgAgUA MCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwDQYJKoZIhvcNAQEL BQADggEBAFEustkOx7V0pIDEbWYl68g8aXwjUWCjhiPZ4rArGFdmSWF8kOugtuZ2 yjuJfw2OS4eFmtP/6rSX39iph+wod57zV+cA/oUXxZfl40Z3ZpODFtc3ZaCqVVkF NAzOe1noEk/6fx6pZ99xnK8VY3glHH7MfKDpTyfvoItGVvDnP1hBivYoS7RWImJO U5IUhE23HezblYl/mm3coigRDK0KJxanWcDbTt02aVb0mDyvjWEe27+Jz1/WygLR b/q+VMp9byG/Kxgn7YVgVkaW4qcYeTn+05pMUuIXeFxxuys5agA2dupitB0bZCOy DMKEyL7SvOpywY2DLoAcbvk3m7sWPoM= -----END CERTIFICATE-----Generated at Wed Jul 2 15:35:21 2025 by rpki-client